Privacy policy
WebNest SARL ("WebNest", "we", "us") respects your privacy. This policy explains what personal data we process when you use web-nest.com, why we process it, and the rights you have under the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the French Data Protection Act ("Loi Informatique et Libertés").
1. Data controller
The data controller is WebNest SARL, registered office at 44 rue Pasquier, 75008 Paris, France, SIREN 104308499.
Contact: privacy@web-nest.com.
2. Data we collect
We collect only what is necessary to operate the website and respond to you:
- Contact data you provide when reaching out (name, email, message content).
- Technical data automatically collected by our servers (IP address, browser type, pages visited, timestamps) for security and site operation.
- Cookie data as described in our cookie policy, only with your consent when required.
3. Purposes and legal bases
- Responding to your enquiries — legal basis: pre-contractual measures at your request or our legitimate interest (Art. 6(1)(b) and (f) GDPR).
- Operating and securing the website — legal basis: our legitimate interest in providing a stable and secure service (Art. 6(1)(f) GDPR).
- Analytics and marketing cookies — legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
- Complying with our legal obligations — legal basis: Art. 6(1)(c) GDPR.
4. Retention
Contact messages are kept for up to 3 years from our last exchange. Server logs are kept for up to 12 months. Consent records are kept for up to 3 years. Data required by law is kept for the period imposed by the applicable regulation.
5. Recipients and subprocessors
Your data is accessed only by authorised WebNest personnel and by service providers acting as processors under a data processing agreement (for example, our hosting provider). We do not sell your personal data.
6. International transfers
Personal data is primarily processed within the European Economic Area. Where a transfer outside the EEA is necessary, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
7. Your rights
Under the GDPR, you have the right to:
- Access your personal data;
- Request rectification or erasure;
- Request restriction of processing;
- Object to processing based on legitimate interest;
- Data portability;
- Withdraw your consent at any time (without affecting the lawfulness of prior processing);
- Define directives on the fate of your data after your death.
To exercise these rights, contact us at privacy@web-nest.com. You also have the right to lodge a complaint with the CNIL (www.cnil.fr) if you believe your rights are not respected.
8. Security
We implement technical and organisational measures appropriate to the risk (encryption in transit, access control, logging, regular updates). No system is fully secure, but we work to protect your data against unauthorised access, alteration, and loss.
9. Changes
We may update this policy from time to time. Material changes will be announced on this page with an updated revision date.